7,076 questions
7,076 questions with Windows for business | Windows Client for IT Pros | Directory services | Active Directory tags
2 answers
How do I fix this: AAD Sync- Directory synchronization is enabled for this directory, but has not yet taken effect.
Directory synchronization is enabled for this directory, but has not yet taken effect. Please wait until directory synchronization is ready. Exception Data (Raw): System.Exception: Directory synchronization is enabled for this directory, but has not yet…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-10-22T14:48:57.77+00:00
Christine Offner
0
Reputation points
commented
2026-10-23T17:58:24.46+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 81%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECT%3C/text%3E%3C/svg%3E)
Chen Tran
13,615
Reputation points
Independent Advisor
2 answers
Unexpected ADMIN_ Profile Folders and Repeated Credential Prompts When Running ADUC as Administrator on Domain-Joined Windows 10/11 Devices
Hello, We manage an on-premises Active Directory domain with Windows 10 and Windows 11 clients managed through Group Policy. Recently, we started experiencing unexpected behavior across multiple workstations. We would like to identify the root cause…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-10-18T18:50:56.6233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 85%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Mustafa Abbas
0
Reputation points
answered
2026-10-21T11:50:15.1033333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 94%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESA%3C/text%3E%3C/svg%3E)
Sk Asif Rahaman
0
Reputation points
2 answers
What real-world apps strictly require Kerberos Protocol Transition ("Use any authentication protocol")
Hey everyone, We are currently auditing our Active Directory delegation settings and found several accounts configured with Constrained Delegation + Kerberos Protocol Transition ("Use any authentication protocol"). Our goal is to lock these…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-10-16T06:27:53.7633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(169.60000000000002, 67%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPS%3C/text%3E%3C/svg%3E)
Prabhjot Singh
255
Reputation points
answered
2026-10-16T11:11:25.2266667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 16%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
VPHAN
46,870
Reputation points
Independent Advisor
3 answers
One of the answers was accepted by the question author.
Request to certificate with powershell?
Hi. I have AD CS. Is it possible to request a template certificate using Powershell from https://domain.com/certsrv/certrqma.asp ?
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Server | User experience | PowerShell
asked
2024-08-27T15:24:55.12+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 60%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Андрей Михалевский
3,476
Reputation points
commented
2026-10-08T23:06:23.05+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 64%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EG%3C/text%3E%3C/svg%3E)
Gavin
1
Reputation point
1 answer
One of the answers was accepted by the question author.
Active Directory: MachineAccountQuota 0 vs SeMachineAccountPrivilege and per-user computer account limits
Working on remediating "Non-privileged users can add computer accounts to the domain." Current default: ms-DS-MachineAccountQuota (MAQ) = 10 SeMachineAccountPrivilege granted to Authenticated Users Requirement: one service-account group…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-10-01T04:44:20.7666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 38%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVK%3C/text%3E%3C/svg%3E)
Vishal Kumar
125
Reputation points
accepted
2026-10-01T11:34:02.8466667+00:00
Vishal Kumar
125
Reputation points
3 answers
I got this option: save your secret key to Azure AD
when i wanna enable bitlocker on disk D，After i set unlock password, the next step shows: How do you want to save your secret key ? There are some options below. save your key on Azure AD(A) save your key on U disk(U) save your key in File(F) print…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-09-04T08:13:32.7766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 93%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJL%3C/text%3E%3C/svg%3E)
jacky lau
0
Reputation points
answered
2026-09-29T05:31:53.1766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 86%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJN%3C/text%3E%3C/svg%3E)
Jason Nguyen Tran
29,300
Reputation points
Independent Advisor
1 answer
Unable to create gMSA with DNSHostName error PermissionDenied, UnauthorizedAccessException
I have a new install of Windows Server 2019 on a VMware VM. There are two domain controllers, DC-01 and DC-02. I'm trying to create gMSA to start SQL Server services. I run the command: Add-KDSRootKey -EffectiveTime ((get-date).addhours(-10)) This works…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Server | User experience | Other
20,455 questions
asked
2021-12-20T15:50:19.517+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 13%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJT%3C/text%3E%3C/svg%3E)
Jack Turner
16
Reputation points
answered
2026-09-25T18:47:27.2366667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 24%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELB%3C/text%3E%3C/svg%3E)
Leonardo Bazterrica
0
Reputation points
1 answer
how to open active directory on windows 11 home
hello, i wanted to shut down my kids ipad i cant close it beacause i need active directory can you please help me
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-09-22T13:03:32.29+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 57.00000000000001%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EML%3C/text%3E%3C/svg%3E)
Machecosafaii Lovebestfriend
0
Reputation points
answered
2026-09-22T14:10:49.5966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 36%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETL%3C/text%3E%3C/svg%3E)
Tracy Le
14,335
Reputation points
Independent Advisor
2 answers
Managed Chrome browser failing to install required security extension via GPO
I need to resolve an issue with managed Google Chrome browsers across our Windows workstations following a recent Group Policy rollout. It says the enterprise policy fails to automatically push and install the required corporate security extension,…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-09-18T17:50:38.27+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 17%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESW%3C/text%3E%3C/svg%3E)
Sarah Williams
40
Reputation points
answered
2026-09-18T19:06:15.5666667+00:00
Tracy Le
14,335
Reputation points
Independent Advisor
1 answer
One of the answers was accepted by the question author.
Windows Hello for Business for local domain user MFA.
I need to implement MFA for users logging into Windows workstations in a traditional on-prem Active Directory environment. The main issue is IT support. Sometimes I need to sign in as the user's domain account to troubleshoot their workstation, but if…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 36%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETD%3C/text%3E%3C/svg%3E)
1 answer
event.code 4771 and 4768 status 0x6
Hello! I’m trying to understand the difference between events 4768 and 4771 with status 0x6. I’ve tried various ways on test environments to trigger event 4771 with status 0x6, but I always get event 4768 with status 0x6 instead. I don't understand why…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-09-10T13:39:21.1933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 31%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMD%3C/text%3E%3C/svg%3E)
Machado Darin
0
Reputation points
answered
2026-09-10T14:15:30.5666667+00:00
Harry Phan
35,165
Reputation points
Independent Advisor
2 answers
One of the answers was accepted by the question author.
Is there any impact on users (maybe user profile, apps, etc) if I configure the laptops to be Entra Hybrid Joined.
Currently my org has the Laptops on the AD. And on EntraID, those laptops show up as Entra Registered. The users are already synced to EntraID from the AD but the devices are not and I'm planning to sync them to EntraID. I wanted to understand if…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 72%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E0%3C/text%3E%3C/svg%3E)
4 answers
One of the answers was accepted by the question author.
Disable Win 11 factory reset (GPO/MDM)
I want to create a GPO & a MDM ( Hybrid environment) policy to disable users from performing factory reset to their Win11 PCs/Laptops. (Something like denying access to C:\Windows\system32\systemreset.exe = Which I cannot find on Win 11) Also, it…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Client for IT Pros | User experience | Other
Microsoft Security | Intune | Other
Microsoft Security | Intune | Other
Other Intune-related topics, including unsupported scenarios and platform-specific behaviors
5,662 questions
asked
2024-11-26T17:22:17.37+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 2%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
lmgmcg
130
Reputation points
commented
2026-09-07T10:55:19.1733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 22%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
JuliaMarvin
23,480
Reputation points
Volunteer Moderator
1 answer
One of the answers was accepted by the question author.
Entra Connect Password Writeback Fails Due to RPC Filtering
Cloud password resets fail to sync back to on-prem AD. How can we restrict RPC ports for AD Sync without breaking password writeback?
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-09-01T02:20:56.99+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 0%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAI%3C/text%3E%3C/svg%3E)
Ahmad Ibrahim
60
Reputation points
accepted
2026-09-05T05:59:38.88+00:00
Ahmad Ibrahim
60
Reputation points
5 answers
Renamed a DC now can't login.
I was adding a new 2022 DC to our domain. Everything went fine but after it was added I noticed the name had a spelling mistake so I used the GUI to change this new DC's name and reset the DC(I now know I should have used netdom). Now I can't login to…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Server | User experience | Other
20,455 questions
asked
2021-12-18T19:55:53.79+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 71%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
LukeDin
11
Reputation points
commented
2026-09-01T12:48:26.42+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 12%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
Sergi Riofrio
0
Reputation points
1 answer
Need help recovering an orphaned AD child domain before Tech Refresh – missing Forest-level FSMO roles and Enterprise Admins
Hi Microsoft Community, I need advice on an Active Directory environment that appears to have been left in an incomplete state after the original parent/forest-root domain was decommissioned. Current environment For example, the original AD structure…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-08-31T09:20:45.77+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(294.40000000000003, 25%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENH%3C/text%3E%3C/svg%3E)
Nicholas How (Malifax SG)
0
Reputation points
answered
2026-08-31T16:33:02.9966667+00:00
Allan Solomon Mejia
10,545
Reputation points
1 answer
August 2026 CU breaks/fixes secure channel trust with Credential Manager enabled
It seems that a constant fail/repair occurs in netlogon.log where Windows 11 patched servers on August 2026 have issues and report NETLOGON 5419 errors in the system event log. This does not happen if CM is disabled. example: 08/24 10:40:54 [SESSION]…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-08-25T14:20:16.2166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 20%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERS%3C/text%3E%3C/svg%3E)
Rich Siegel
0
Reputation points
answered
2026-08-25T21:52:11.6233333+00:00
Allan Solomon Mejia
10,545
Reputation points
4 answers
One of the answers was accepted by the question author.
How to switch from Private to Domain network - Windows server 2019 RODC
I have created a windows server 2019 RODC, it is working fine. But, it automatically goes to "Private Network". I have other windows server 2012 R2 RODC, they are in "Domain Network". I read some article to restart "Network…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Server | User experience | Other
20,455 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 39%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 89%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
1 answer
How to get a hold of Microsoft technicians to help with Domain Controller issue?
We have some questions about some logs that we are seeing on our domain controllers and Microsoft has made it impossible to get a hold of a live technician. The Engage Center says that we cannot purchase services for the issues that we are experiencing…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-08-19T22:14:33.54+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 40%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAJ%3C/text%3E%3C/svg%3E)
Admin Justin
0
Reputation points
answered
2026-08-20T01:16:13.2666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 9%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHL%3C/text%3E%3C/svg%3E)
Hoang Le
6,445
Reputation points
Independent Advisor
2 answers
Forest trust SID filtering vs SID history — are these the same setting or two different things?
Hello, Working through an AD security finding in an isolated lab and want a sanity check on my understanding before I take this to a client. The finding: "Domain trust to a third-party domain without quarantine" (ANSSI…
Windows for business | Windows Client for IT Pros | Directory services | Active Directory
asked
2026-08-18T09:26:48.41+00:00
Vishal Kumar
125
Reputation points
answered
2026-08-18T12:10:40.9266667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 38%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMP%3C/text%3E%3C/svg%3E)
Marcin Policht
111.4K
Reputation points MVP
Volunteer Moderator